$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/104ae49f-72a5-3b15-a1e5-0679593c9d0e.roa File: 104ae49f-72a5-3b15-a1e5-0679593c9d0e.roa (raw, json) Hash identifier: 7hOwijJp0cSZ1e273L+TLLXrgW9ORRXXCo1qPqvqfYc= Subject key identifier: 28:B0:BF:1F:91:25:34:86:75:98:D6:42:9A:A5:8F:D3:3D:EB:7D:7F Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584F57680BD8756F0AF9937E0680 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/104ae49f-72a5-3b15-a1e5-0679593c9d0e.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 17275 IP address blocks: 161.107.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:0b:d8:75:6f:0a:f9:93:7e:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=f2ef5043-a52d-4233-a441-d5f73febc08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:34:62:db:0f:03:d9:01:e2:55:b2:bb:c9:11: 0a:b9:44:99:bd:a8:e5:1e:25:e1:d1:50:c1:11:a3: 9a:43:3f:83:60:f0:7d:9b:1c:24:65:50:97:71:cc: 4e:4c:de:53:ea:28:23:7b:64:8e:d0:8c:f2:87:77: d5:55:9b:0a:3a:07:77:5a:cd:b9:68:c0:dd:a2:35: 48:93:dd:8b:65:e8:19:cc:e7:3d:6e:49:ea:9a:bd: bf:e1:a1:a6:da:bc:2b:c0:3a:c4:6b:5c:aa:87:b4: a3:6c:75:e6:bc:ee:6c:a4:12:50:f9:cc:ae:29:bb: 2c:f6:37:cb:01:dc:d3:c8:14:50:5d:54:e0:7b:7a: c2:61:ea:87:3b:ad:e8:72:92:33:14:e9:7e:7d:89: ab:04:3f:39:27:7f:73:97:18:98:3a:29:ef:e7:7b: 27:9a:b3:c0:2e:4e:ee:3d:68:a8:f3:fa:c9:23:a1: b7:9d:36:54:88:56:53:fc:58:c1:31:dc:a2:fb:e9: a0:59:13:47:a6:d2:a0:42:40:c4:a7:51:c8:3d:9e: 62:2d:1c:f2:d5:9a:b3:13:19:7e:14:70:df:da:cb: fe:1b:02:06:06:50:c0:80:8f:c7:b6:c6:c0:a9:52: 70:1c:89:e7:61:7f:0c:9f:8a:d1:28:5d:11:fe:5d: d6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B0:BF:1F:91:25:34:86:75:98:D6:42:9A:A5:8F:D3:3D:EB:7D:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/104ae49f-72a5-3b15-a1e5-0679593c9d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:6f:69:7b:fd:90:88:4d:d2:f6:bb:96:13:8f:63:a6:60:b5: 60:94:5b:65:6d:5c:af:d3:2f:9d:89:13:0d:84:0a:83:d5:a2: 3b:99:d7:30:82:32:f6:47:a6:92:cd:37:81:76:b8:bd:ee:ef: c6:18:7e:1e:b9:69:fa:32:ef:bc:d1:fa:83:6c:1f:ef:dc:f0: 3c:91:56:13:c3:1d:4a:e3:57:b3:98:8e:24:e3:2f:ec:76:3f: 18:aa:0b:2d:4c:2e:db:11:d7:23:14:1f:15:9d:8b:e2:62:d1: 33:15:94:f3:de:ba:93:12:a4:10:c4:a5:01:25:0c:b0:7e:54: ce:f0:32:21:fc:bc:ab:77:9c:d5:19:60:73:d6:7b:b0:d3:eb: 97:88:e1:b9:19:10:ad:8c:b6:c9:e1:eb:ee:8f:b0:4f:75:dd: 50:3b:5d:8b:28:d6:6d:ea:12:1f:5e:21:ad:6c:cb:c7:44:4d: c8:f3:0a:56:47:6b:68:8d:87:c9:a5:93:41:c6:de:72:0a:dc: 2c:f1:4f:f8:60:c0:67:da:a2:1d:50:a7:c1:da:64:77:40:fc: b1:8e:15:c8:b4:e8:a4:d3:c7:ac:bd:df:09:50:1d:61:8d:17: dd:43:33:08:be:0c:3c:d8:28:0a:88:8f:f6:5e:bd:3e:59:39: a3:96:82:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaAvYdW8K+ZN+BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZjJlZjUwNDMtYTUyZC00MjMzLWE0NDEtZDVmNzNmZWJjMDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjRi2w8D2QHiVbK7yREKuUSZvajlHiXh0VDB EaOaQz+DYPB9mxwkZVCXccxOTN5T6igje2SO0Izyh3fVVZsKOgd3Ws25aMDdojVI k92LZegZzOc9bknqmr2/4aGm2rwrwDrEa1yqh7SjbHXmvO5spBJQ+cyuKbss9jfL AdzTyBRQXVTge3rCYeqHO63ocpIzFOl+fYmrBD85J39zlxiYOinv53snmrPALk7u PWio8/rJI6G3nTZUiFZT/FjBMdyi++mgWRNHptKgQkDEp1HIPZ5iLRzy1ZqzExl+ FHDf2sv+GwIGBlDAgI/HtsbAqVJwHInnYX8Mn4rRKF0R/l3WKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiwvx+RJTSGdZjWQpqlj9M9631/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvMTA0YWU0OWYtNzJhNS0z YjE1LWExZTUtMDY3OTU5M2M5ZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRvaXv9kIhN0va7lhOPY6ZgtWCUW2VtXK/TL52JEw2ECoPVojuZ1zCC MvZHppLNN4F2uL3u78YYfh65afoy77zR+oNsH+/c8DyRVhPDHUrjV7OYjiTjL+x2 PxiqCy1MLtsR1yMUHxWdi+Ji0TMVlPPeupMSpBDEpQElDLB+VM7wMiH8vKt3nNUZ YHPWe7DT65eI4bkZEK2Mtsnh6+6PsE913VA7XYso1m3qEh9eIa1sy8dETcjzClZH a2iNh8mlk0HG3nIK3CzxT/hgwGfaoh1Qp8HaZHdA/LGOFci06KTTx6y93wlQHWGN F91DMwi+DDzYKAqIj/ZevT5ZOaOWgig= -----END CERTIFICATE-----Generated at Sun Oct 4 07:38:45 2026 by rpki-client